mirror of
https://gitea.blesmrt.net/mikaela/shell-things.git
synced 2024-11-22 03:09:22 +01:00
etc/sshd_config.d: add basic-security.conf
Ref: 88
This commit is contained in:
parent
35a118a5e8
commit
a7c643bb7a
3
etc/ssh/sshd_config.d/README.md
Normal file
3
etc/ssh/sshd_config.d/README.md
Normal file
@ -0,0 +1,3 @@
|
||||
sshd_config should include something like
|
||||
|
||||
Include /etc/ssh/sshd_config.d/*.conf
|
13
etc/ssh/sshd_config.d/basic-security.conf
Normal file
13
etc/ssh/sshd_config.d/basic-security.conf
Normal file
@ -0,0 +1,13 @@
|
||||
# RSA and Ed25519 are fine, but DSA is broken and ecdsa is suspicious
|
||||
HostKey /etc/ssh/ssh_host_rsa_key
|
||||
HostKey /etc/ssh/ssh_host_ed25519_key
|
||||
|
||||
# Includes public keys in logins
|
||||
LogLevel VERBOSE
|
||||
|
||||
# root login should probably be denied entirely, but key is better than
|
||||
# password
|
||||
PermitRootLogin prohibit-password
|
||||
|
||||
# Passwords are bad
|
||||
PasswordAuthentication no
|
Loading…
Reference in New Issue
Block a user